Privacy Policy

This Privacy Policy applies to FrankfurtStockExchange.de ("Site") and explains how we collect, use, disclose, and safeguard your information when you visit our Site, create an account, submit press releases, or make payments through our services.

Please read this Privacy Policy carefully. By using the Site, you consent to the data practices described in this policy. If you do not agree with our policies and practices, do not use the Site.

Personal Data means any information relating to an identified or identifiable natural person.

Processing means any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.

Controller means the person or entity that determines the purposes and means of processing personal data.

General Data Protection Regulation (GDPR) is the European Union law for data protection and privacy.

Swiss Federal Act on Data Protection (FADP) is the Swiss law governing data protection.

PCI DSS (Payment Card Industry Data Security Standard) is the security standard for organizations that handle credit card information.

2.1 Information You Provide to Us

Account Registration: When you create an account, we collect:

• Full name
• Email address
• Password (encrypted and never stored in plain text)
• Company/organization name (optional)
• Job title (optional)
• Phone number (optional)
• Country code

Press Release Submissions: When you submit a press release, we collect:

• Headline, subheading, and body content
• Company/organization information
• Contact information (name, email, phone, job title, agency)
• Location (city, state, country)
• Keywords for categorization
• Links and descriptions
• Images (if uploaded)
• Quote attributions
• Preferences for public display of contact information

Payment Information: When you make a payment, we collect:

• Billing information processed securely through Stripe
• Transaction history and payment status
• We do NOT store complete credit card numbers or CVV codes

Communications: When you contact us, we collect:

• Your name and email address
• The content of your inquiry
• Any attachments you provide

2.2 Information Collected Automatically

When you access the Site, we automatically collect:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Date and time stamps of visits
• Clickstream data

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. For detailed information, please see our Cookie Policy.

We use the information we collect for the following purposes:

3.1 Service Delivery

• Create and manage your account
• Process and publish press releases
• Process payments and maintain transaction records
• Provide customer support
• Send service-related notifications and updates
• Verify your identity and authenticate access

3.2 Security and Compliance

• Maintain audit logs for security monitoring and compliance
• Detect, prevent, and address fraud and security issues
• Enforce our Terms of Use and other policies
• Comply with legal obligations and regulatory requirements
• Validate passwords against compromised password databases
• Monitor for unauthorized access attempts

3.3 Improvement and Analytics

• Analyze usage patterns to improve the Site
• Track visitor statistics
• Understand user preferences and behavior
• Develop new features and services
• Conduct research and analysis

3.4 Marketing and Communications

• Send newsletters and promotional materials (with your consent)
• Provide information about new services
• Conduct surveys and gather feedback

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: To fulfill our contract with you (account management, press release publication, payment processing)
• Consent: When you have given explicit consent (marketing communications, optional data collection)
• Legitimate Interests: For fraud prevention, security, and improving our services
• Legal Obligation: To comply with applicable laws and regulations

5.1 Public Information

Published press releases and any information you choose to make public through the Site will be visible to all Site visitors. You can control the public display of your contact information through privacy settings.

5.2 Service Providers

We share information with trusted third-party service providers who assist us in operating the Site:

• Stripe: Payment processing (subject to Stripe\'s privacy policy)
• Cloud hosting providers: Data storage and infrastructure
• Email service providers: Transactional and marketing emails
• Analytics providers: Usage statistics and performance monitoring

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose your information when required by law or in response to:

• Court orders, subpoenas, or other legal processes
• Regulatory investigations or requests
• Requests from law enforcement or government agencies
• Protection of our rights, property, or safety, or that of others

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.

Your personal data may be transferred to and processed in countries outside of Switzerland and the European Economic Area (EEA), including countries that may not provide the same level of data protection as your home jurisdiction.

When we transfer personal data internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection levels
• Other legally recognized transfer mechanisms

By using the Site, you consent to the transfer of your information to countries outside your country of residence, including the United States and Switzerland.

We implement comprehensive security measures to protect your personal information:

7.1 Technical Safeguards

• SSL/TLS encryption for data transmission
• Encrypted password storage using industry-standard hashing algorithms
• Secure database architecture with row-level security (RLS) policies
• Validation against compromised password databases
• Rate limiting to prevent brute force attacks
• Regular security audits and vulnerability assessments

7.2 Administrative Safeguards

• Role-based access control limiting data access to authorized personnel
• Comprehensive audit logging of sensitive operations
• Regular security training for employees
• Incident response procedures

7.3 Payment Security

All payment information is processed by Stripe, a PCI DSS Level 1 certified payment processor. We do not store complete credit card numbers or CVV codes on our servers.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific Retention Periods:

• Account information: Retained while your account is active and for 3 years after closure
• Published press releases: Retained indefinitely unless deletion is requested
• Audit logs: Retained for 7 years for compliance purposes
• Payment records: Retained for 10 years as required by financial regulations
• Marketing communications: Retained until you unsubscribe

After the retention period expires, we securely delete or anonymize your personal information in accordance with applicable laws.

Depending on your location, you may have the following rights regarding your personal information:

9.1 Access and Portability

• Request access to your personal information
• Receive a copy of your data in a structured, machine-readable format

9.2 Correction and Update

• Correct inaccurate or incomplete personal information
• Update your profile information through your account settings

9.3 Deletion

• Request deletion of your personal information (subject to legal retention requirements)
• Close your account

9.4 Restriction and Objection

• Restrict processing of your personal information
• Object to processing based on legitimate interests
• Opt out of marketing communications

9.5 Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time. This will not affect the lawfulness of processing before the withdrawal.

9.6 Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

To exercise any of these rights, please contact us at halo@frankfurtstockexchange.de. We will respond to your request within 30 days.

The Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

If you believe we have collected information from a child, please contact us immediately at halo@frankfurtstockexchange.de.

The Site may contain links to third-party websites, including links in published press releases. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of any third-party sites you visit.

Our use of Stripe for payment processing is subject to Stripe\'s Privacy Policy, available at stripe.com/privacy.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your rights

To exercise these rights, contact us at halo@frankfurtstockexchange.de with "California Privacy Rights" in the subject line.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on this page with a revised "Last modified" date
• Sending an email notification to registered users (for significant changes)

Your continued use of the Site after such modifications constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: halo@frankfurtstockexchange.de

For GDPR-related inquiries, you may also contact our EU representative at the same email address.

We are committed to data protection compliance and adherence to:

• Swiss Federal Act on Data Protection (FADP)
• European Union General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• PCI DSS standards for payment processing (through Stripe)

Data Controller: TITAN Holding AG, Landstrasse 99, 9494 Schaan, Liechtenstein. Contact: privacy@frankfurtstockexchange.de